Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: b4eDJTcNlIc7q9HRk/WJ+pwY6JvAarOrJqB/LSbnAB0=
Subject key identifier: 3D:2F:8B:C0:E0:12:47:C2:24:89:24:E0:AE:6E:71:B9:3F:3C:CC:4D
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 0198D5BBA521D0F8E6201B416205734F9230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 0457
Signing time: Sat 23 Aug 2025 07:01:41 +0000
Manifest this update: Sat 23 Aug 2025 07:01:41 +0000
Manifest next update: Sun 24 Aug 2025 07:01:41 +0000
Files and hashes: 1: 0MlTaxTSqs7exW9T9UwJnI13N48.roa (hash: tFPjdFZ8VQwwFGSe9O82bqMhmvn5QbzxecPzG4FY10Y=)
2: A_9f9I_3b-WkwSIFr6U0ozOcgrI.roa (hash: ldoqGlxkskwlUGFcvsBCWW2juWo6FhsFHoXDckpMuNw=)
3: CIfkNcs_dPG1243KuyQzPUhrSqE.roa (hash: vq82qZoa17x2oFYdWbGJVFocqNvpvLo719jmFST2KLk=)
4: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: uEq6YXtjy+Zprr1eNp1PPjgk1/rIYtcxYg47efWEkyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:a5:21:d0:f8:e6:20:1b:41:62:05:73:4f:92:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Aug 23 07:01:41 2025 GMT
Not After : Aug 24 07:01:41 2025 GMT
Subject: CN=3d2f8bc0e01247c2248924e0ae6e71b93f3ccc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:81:bf:ac:01:d3:0d:94:68:cd:c5:b3:db:
9a:74:f4:44:f4:7a:d2:26:2c:bc:41:1d:45:85:5f:
7a:42:f9:9d:4a:da:0c:9d:4b:27:19:02:14:7d:1f:
02:60:4d:2f:b6:78:d3:bd:d2:76:96:34:a8:eb:68:
e0:c4:6e:01:6b:b8:f7:2a:dc:f7:7a:be:1d:46:d5:
30:13:b5:72:7c:18:f5:cf:7a:10:70:f5:f2:f1:86:
93:f4:1f:20:00:26:47:71:d5:3a:c5:18:ed:68:f6:
4e:75:31:54:2b:92:fa:cc:da:ca:51:92:af:f1:05:
58:43:f0:9f:cf:de:8f:e5:26:77:f1:09:15:1e:ea:
e0:d8:d4:9d:4e:38:f9:54:52:ff:88:1a:f6:f9:7c:
b4:bd:6e:32:1b:2f:6b:bf:9f:17:a1:32:17:75:0b:
39:bc:99:a0:6d:44:ba:90:62:0a:11:fc:7c:7b:c6:
c6:c5:71:93:0a:4c:e4:3c:f2:47:90:0f:6c:da:ec:
1f:d2:24:21:fd:88:50:4f:a3:ef:a3:d4:ab:3f:ec:
8b:d1:83:8a:ce:52:88:fb:6c:77:38:95:c4:5d:8d:
8b:91:e2:c0:44:23:ed:9e:5d:a5:fb:92:0d:ae:f6:
97:49:f1:51:04:f2:ab:ec:51:64:a3:82:cb:ed:f4:
05:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2F:8B:C0:E0:12:47:C2:24:89:24:E0:AE:6E:71:B9:3F:3C:CC:4D
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0d:08:93:58:5f:0e:79:d3:89:5a:e3:dc:be:c4:30:6d:00:
31:13:18:6c:d7:03:52:fd:7a:3d:51:99:ec:7b:4b:c2:5c:b4:
1b:00:bc:05:bb:be:75:80:c5:32:9e:b4:02:99:09:ab:82:d4:
72:ef:f3:94:ba:1b:a5:3b:a9:c4:37:ba:be:a6:21:94:58:61:
77:31:6d:9d:37:c5:58:e2:1d:de:34:89:67:15:d8:db:90:94:
b6:6a:2e:6b:28:0e:d7:0e:a2:66:4c:38:3a:97:a5:80:5f:37:
4b:c2:16:79:19:05:e5:fc:65:17:09:a1:8f:0a:bc:10:14:b3:
be:c2:56:6e:e4:93:76:9c:5d:51:48:1a:8d:98:1c:3e:e6:50:
f2:21:3e:de:03:4e:a0:08:73:c7:63:c1:94:bf:23:05:04:82:
95:f5:30:e1:22:c9:01:e0:8f:ed:9b:ba:c2:2e:7b:1b:58:2f:
e1:90:30:37:4b:27:87:32:ec:05:04:e4:b4:93:59:57:7a:84:
0d:d5:2c:b4:5c:cc:16:b0:af:3b:93:26:78:59:68:d7:4a:1b:
98:5e:be:12:cc:62:a4:2d:e0:82:5d:78:73:31:5d:28:96:00:
c5:b7:57:0b:f7:dd:ba:2d:ae:ae:94:78:70:73:37:32:60:4e:
09:81:32:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:28 2025 by rpki-client